Known vulnerabilities in Red Hat OpenStack - page 8

Vendor: Red Hat Inc.
Software: Red Hat OpenStack
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 406
Public exploits: 29
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack Red Hat OpenStack is affected by 406 known vulnerabilities: 1 critical, 59 high, 203 medium, 143 low Critical High Medium Low

Vulnerabilities (406)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70474 - Integer overflow
CVE-2022-47629		 CWE-190 High
No
No
 - 22.12.2022 SB2022122202
SB2022122204
SB2022122205
and 98 more
#VU70461 - Improper Privilege Management
CVE-2022-4415		 CWE-269 Low
No
No
 - 21.12.2022 SB2022122140
SB2022122735
SB2022122816
and 70 more
#VU70053 - Improper Certificate Validation
CVE-2022-2996		 CWE-295 Medium
No
No
 16.1.9, 16.2.4, 17.0 08.12.2022 SB2022120832
SB2022120854
SB2022120855
and 2 more
#VU70050 - Incorrect Permission Assignment for Critical Resource
CVE-2022-1655		 CWE-732 Low
No
No
 16.2.4 08.12.2022 SB2022120830
#VU70048 - Resource exhaustion
CVE-2022-3277		 CWE-400 Medium
No
No
 16.1.9, 16.2.4, 17.0 08.12.2022 SB2022120828
SB2022120829
SB2022120831
and 2 more
#VU68858 - Off-by-one Error
CVE-2021-46848		 CWE-193 Medium
No
No
 - 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 - 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 - 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737		 CWE-129 Medium
Available
No
 - 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU64940 - Improper input validation
CVE-2022-31116		 CWE-20 Medium
No
No
 16.1.9, 16.2.4 05.07.2022 SB2022070536
SB2022072110
SB2022080433
and 12 more
#VU64691 - Improper input validation
CVE-2022-0675		 CWE-20 High
No
No
 16.1.9, 16.2.3 27.06.2022 SB2022062730
SB2022120824
#VU62576 - Improper Authorization
CVE-2022-23452		 CWE-285 Low
No
No
 16.1.9, 16.2.3 25.04.2022 SB2022042572
SB2022042573
SB2022062242
and 1 more
#VU62575 - Improper Authorization
CVE-2022-23451		 CWE-285 Medium
No
No
 16.1.9, 16.2.3 25.04.2022 SB2022042572
SB2022042573
SB2022062242
and 1 more
#VU60198 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23833		 CWE-835 Medium
No
No
 16.1.9, 16.2.4 01.02.2022 SB2022020110
SB2022041954
SB2022020334
and 11 more
#VU60197 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22818		 CWE-79 Medium
Available
No
 16.1.9, 16.2.4 01.02.2022 SB2022020110
SB2022041954
SB2022020334
and 12 more
#VU54450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32718		 CWE-79 Low
No
No
 16.1.9, 16.2.4 30.06.2021 SB2021063001
SB2021070609
SB2021101002
and 5 more
#VU23382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10768		 CWE-79 Medium
No
No
 16.1.9, 16.2.4, 17.0 04.12.2019 SB2019120407
SB2022090718
SB2022120810
and 11 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331		 CWE-79 Low
No
No
 16.1.9, 16.2.4 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more


Showing elements 141 - 160 out of 406